/
loss_type:data × criticity:critical × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · critical

WP2Shell: CVE-2026-63030 and CVE-2026-60137 chained for unauthenticated RCE on default WordPress, exploitation observed

Researchers describe WP2Shell, a chain of two WordPress core flaws, CVE-2026-63030 and CVE-2026-60137, that lets unauthenticated attackers progress from public REST API endpoints to remote code execution. It affects default installations with no third-party plugin required. Public exploit code exists and exploitation attempts have been ob…

CVE-2026-63030 CVE-2026-60137
gbhackers.com · critical

Zimbra Collaboration Suite zero-click command injection CVE-2026-73570 exploited to take over email servers

Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…

CVE-2026-73570